For a few days Italian users have been bombarded with emails (and, in some cases, calls) apparently sent by INPS. It is, however, a scam
When a public body such as the National Institute of Social Security (INPS) launches an official communication inviting citizens to beware of scams, it means that there is something very risky going around the Web. The scam, in this case, is based on phishing emails and phone calls during which we are asked to provide sensitive data such as our bank account number for the crediting of a transfer.
Most of the victims of this attempted (and, unfortunately, sometimes successful) scam are contacted via email, while only a smaller number of users are reached by phone. Also the scammers, in fact, know that the emails are much cheaper and above all anonymous while the phone calls are more suitable only in case of users who do not use a lot of computer media, such as the elderly. In any case, the alarm remains, so much so that the INPS has moved to provide official information on the matter and warn potential victims of this latest scam.
How the INPS scam works
The gist of the scam is this: the user is contacted with a request for information on his bank account, necessary to make a substantial transfer in his favor by a third party company but on behalf of the INPS. The phantom bank transfers can reach amounts of more than eight hundred euros, but they are just a red herring since everything is false: INPS has not given any payment mandate to any company. The phishing email contains in fact a link that sends to a fraudulent site, where the user has to insert his data that, obviously, will not go to the Institute but to the fraudsters. In the case of the phone call, instead, it is even a fake INPS employee who asks for the data.
The INPS recommendations to defend yourself from the scam
As we were saying, the issue is so delicate and dangerous (who wouldn’t trust the INPS?) to push the social security institute to issue an official note to warn citizens. INPS explains: “The Institute reminds all citizens that in no case acquires, by phone or by ordinary email, bank details or other data that allow you to trace any financial information. INPS invites its users not to follow up on any request that arrives by non-certified email, by phone or door to door.